于小丘
abd85e2290
Renamed AuthRequired/AdminRequired to auth_required/admin_required and updated all references. Replaced direct HTTPException usage with utils.http_exceptions for consistent error handling. Updated router endpoints to use new auth dependency and standardized not implemented responses. Cleaned up unused theme fields in SiteConfigResponse and improved site config endpoint. Minor type and import cleanups across routers and middleware.
47 lines
1.2 KiB
Python
47 lines
1.2 KiB
Python
from typing import Annotated
|
|
|
|
from fastapi import Depends
|
|
import jwt
|
|
|
|
from models.user import User
|
|
from utils.JWT import JWT
|
|
from .dependencies import SessionDep
|
|
from utils import http_exceptions
|
|
|
|
async def auth_required(
|
|
session: SessionDep,
|
|
token: Annotated[str, Depends(JWT.oauth2_scheme)],
|
|
) -> User:
|
|
"""
|
|
AuthRequired 需要登录
|
|
"""
|
|
try:
|
|
payload = jwt.decode(token, JWT.SECRET_KEY, algorithms=["HS256"])
|
|
username = payload.get("sub")
|
|
|
|
if username is None:
|
|
http_exceptions.raise_unauthorized("账号或密码错误")
|
|
|
|
# 从数据库获取用户信息
|
|
user = await User.get(session, User.username == username)
|
|
if not user:
|
|
http_exceptions.raise_unauthorized("账号或密码错误")
|
|
|
|
return user
|
|
|
|
except jwt.InvalidTokenError:
|
|
http_exceptions.raise_unauthorized("账号或密码错误")
|
|
|
|
async def admin_required(
|
|
user: Annotated[User, Depends(auth_required)],
|
|
) -> User:
|
|
"""
|
|
验证是否为管理员。
|
|
|
|
使用方法：
|
|
>>> APIRouter(dependencies=[Depends(admin_required)])
|
|
"""
|
|
group = await user.awaitable_attrs.group
|
|
if group.admin:
|
|
return user
|
|
raise http_exceptions.raise_forbidden("Admin Required") |